CVE-2007-6137

Content Injector 1.52 has a SQL injection in news.php via the cat parameter to index.php, allowing remote attackers to execute arbitrary SQL. Root cause: unsafe query construction in the affected script. Impact: confidentiality, integrity, and availability partially affected; CVSS v2 base score 7...

CVE-2007-6394

Content Injector 1.53 is affected by a SQL injection in index.php via the id parameter in the expand action. The vulnerability allows remote attackers to execute arbitrary SQL commands and could lead to data compromise or corruption. The entry is supported by multiple sources (NVD/NVD entry) and ...